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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
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International Bureau (PCT Rule 17.2(a)). 
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INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 
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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Frank J. Bonini, Jr. (Reg. No. 35,452) on 05/1 1/2009. Authorization has also been 
given to charge any additional fees which maybe required to Patent Office Deposit 
Account No. 05-0208. 

The application has been amended as follows: 
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LISTING OF THE CLAIMS: 

Claims 1-7 (Cancelled). 

8. (Currently Amended) A method as in claim [[1]] 32 further comprising the step of 
reporting the results of said comparison. 

9. (Currently Amended) A method as in claim [[1]] 32 further comprising the step of 
logging the results of said comparison. 

1 0. (Currently Amended) A method as in claim [[1 ]] 32 further comprising the step of 
securing a client in lock down mode. 

1 1 . (Currently Amended) A method as in claim [[1]] 32 further comprising the step of 
initiating a client status mechanism. 

12. (Currently Amended) A method as in claim [[1 ]] 32 further comprising the step of 
initiating an Auto Restore component. 

1 3. (Currently Amended) A method as in claim [[1 ]] 32 wherein the step of providing 
a client state code further comprises generating a client state code. 

Claims 14-27 (Cancelled). 

28. (Currently Amended) The method of claim [[1]] 32, wherein said clients within 
said network are identical clients, and wherein said client state codes of the said 
identical clients are identical. 

29. (Currently Amended) The method of claim [[1]] 32, wherein said clients within 
said network have one or more files present thereon which are common to one or more 
clients on said network, said files, 
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wherein said hash code table includes file names and hash codes which are 
concatenated and stored in said table. 

30. (Currently Amended) The method of claim [[1]] 32, wherein said method involves 
initiating a client process from a computer, and wherein providing a hash code table of a 
client comprises providing a hash code table for the computer from which the client 
process was initiated. 

31 . (Currently Amended) The method of claim [[1 ]] 32, wherein the client state code 
is transmitted along with authentication. 

32. (Previously Presented) A method for securing, maintaining, monitoring and 
controlling computer networks and clients located therein, comprising: providing a hash 
code table of a client said hash code table being provided for storing a plurality of files; 
providing a client state code of a client; comparing said client state code to said hash 
code table, and generating an alert mechanism when a deviation threshold is reached 
based on a deviation between said hash code table values for said client and said client 
state code; 

wherein said hash code table includes the hash codes for files on computers 
within the network that are to be secured; 
the method further including: 

transmitting across a network from clients located in the network a client state 

code; 

providing at least one server within the network assigned to recognize said client 
state code transmission, 
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wherein said server maintains a baseline for said client, and 

wherein said baseline comprises said hash code table of a said client; 

wherein the step of providing a hash code table of a network device further 
comprises providing a secure hash code table; 

wherein the step of providing a secure hash code table further comprises 
generating a secure hash code table; and 

wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one compiled client hash value, 
wherein said compiled client hash value is generated by: providing a secure system 
state data file; grouping said secure system data file into one or more groups; and, 
extracting the modal hash value from any of said groups. 
33. (Currently Amended) The [[A]] computer storage component of claim 34. 
i nc l ud i ng softwar e conta i n i ng th e hash cod e tab le g e n e rat e d by a m e thod for s e cur i ng, 
ma i nta i n i ng, mon i tor i ng and contro lli ng computer networks and c li ents l ocated thoro i n, 
compr i s i ng: prov i d i ng a hash cod e tab le of a cli e nt sa i d hash cod e tab le b ei ng prov i d e d 
for stor i ng a p l ura li ty of f il os; prov i d i ng a c li ent state code of a c li ent; compar i ng sa i d 
c lie nt stat e cod e to sa i d hash cod e tab le , and g e n e rat i ng an a le rt m e chan i sm wh e n a 
d e v i at i on thr e sho l d i s r e ach e d bas e d on a d e viat i on b e tw ee n sa i d hash cod e tab le 
va l u e s for sa i d c lie nt and sa i d c lie nt stat e cod e ; wh e r ei n sa i d hash cod e tab le i nc l ud e s 
the hash codes for f il os on computors w i thin the network that arc to bo secured; 
th e m e thod furth e r i nc l ud i ng: 

transm i tt i ng across a network from clients l ocated i n the network a c li ent state 
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prov i d i ng at l east 



w i th i n tho network ass i gned to rocogn i zo sa i d c li ent 



stat e cod e transm i ss i on, 



where i n sa i d 



ma i nta i ns a base li ne for sa i d c li ent, and 



wh e r ei n sa i d bas eli n e compr i s e s said hash cod e tab le of a sa i d c lie nt; wh e r ei n 
tho stop of prov i d i ng a hash code tab l e of a network dev i ce further compr i ses prov i d i ng 
a secure hash code tab l e; 

where i n tho stop of prov i d i ng a secure hash code tab l e further compr i ses 



wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one compiled client hash value. 
34. (Previously Presented) A computer storage component including software 
containing the hash code table generated by a method for securing, maintaining, 
monitoring and controlling computer networks and clients located therein, comprising: 
providing a hash code table of a client said hash code table being provided for storing a 
plurality of files; providing a client state code of a client; comparing said client state code 
to said hash code table, and generating an alert mechanism when a deviation threshold 
is reached based on a deviation between said hash code table values for said client and 
said client state code; 

wherein said hash code table includes the hash codes for files on computers 
within the network that are to be secured; 

the method further including: 



generat i ng 



hash cod e tab le ; and 
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transmitting across a network from clients located in the network a client state 

code; 

providing at least one server within the network assigned to recognize said client 
state code transmission, 

wherein said server maintains a baseline for said client, and 

wherein said baseline comprises said hash code table of a said client; wherein 
the step of providing a hash code table of a network device further comprises providing 
a secure hash code table; 

wherein the step of providing a secure hash code table further comprises 
generating a secure hash code table; and 

wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one compiled client hash value, 
wherein said compiled client hash value is generated by: providing a secure system 
state data file; grouping said secure system data file into one or more groups; and, 
extracting the modal hash value from any of said groups. 
35. (Currently Amended) The [[A]] computer storage component of claim 34. 
i nc l ud i ng softwar e conta i n i ng th e hash cod e tab le g e n e rat e d by a m e thod for s e cur i ng, 
ma i nta i n i ng, mon i tor i ng and contro lli ng comput e r n e tworks and c lie nts l ocat e d th e r ei n, 
compr i s i ng: prov i d i ng a hash cod e tab le of a c l i e nt sa i d hash cod e tab le b ei ng prov i d e d 
for stor i ng a p l ura li ty of f il es; prov i d i ng a cl i ent state code of a c li ent; compar i ng sa i d 
c lie nt stat e cod e to sa i d hash cod e tabl e , and g e n e rat i ng an a le rt m e chan i sm wh e n a 
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d e v i at i on thr e sho l d i s r e ach e d bas e d on a d e viat i on b e tw ee n sa i d hash cod e tab le 
va l ues for sa i d c li ent and sa i d c li ent stato code; 

wh e r ei n sa i d hash cod e tab le i nclud e s the hash cod e s for f ile s on comput e rs 
w i th i n the network that arc to bo socurod; 

th e m e thod furth e r i nc l ud i ng: 

transm i tt i ng across a network from clients l ocated i n tho network a c li ent stato 

prov i d i ng at l east one server w i th i n the network ass i gned to recogn i ze sa i d c li ent 
stat e cod e transm i ss i on, 

where i n sa i d server ma i nta i ns a base li ne for said c li ent, and 

wh e r ei n sa i d bas eli n e compr i s e s sa i d hash cod e tab le of a sa i d c li ent; 

where i n tho stop of prov i d i ng a hash codo tab l o of a network dov i co further 
compr i s e s prov i d i ng a s e cur e hash cod e tab l e; 

where i n tho stop of prov i d i ng a secure hash codo tab l o further compr i ses 
generat i ng a secure hash codo tab l o; and 

wherein the stop of generating a secure hash code table further comprises 
generating a secure hash code table using at least one exemplary system. 
36. (Currently Amended) The [[A]] computer storage component of claim 34. 
i nc l ud i ng softwar e conta i n i ng th e hash cod e tab le g e n e rat e d by a m e thod for s e cur i ng, 
ma i nta i n i ng, mon i tor i ng and contro lli ng computer networks and c li ents l ocated there i n, 
compr i s i ng: prov i d i ng a hash cod e tab le of a client sa i d hash cod e tab le b ei ng prov i d e d 
for stor i ng a p l ura li ty of f il es; prov i d i ng a cl i ent stato codo of a c li ent; compar i ng sa i d 
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c lie nt stat e cod e to sa i d hash cod e tab le , and g e n e rat i ng an a le rt m e chan i sm wh e n a 
dev i at i on thresho l d i s reached based on a deviat i on botwoon sa i d hash codo tab l e 
va l u e s for sa i d c lie nt and sa i d c lie nt stat e cod e ; 

where i n sa i d hash codo tab l e i nc l udes the hash codes for f il es on computers 
w i th i n th e n e twork that ar e to b e s e cur e d; 

the method further i nc l ud i ng: 

transm i tt i ng across a n e twork from c lie nts l ocat e d i n th e n e twork a c lie nt stat e 

prov i d i ng at le ast on e s e rv e r w i th i n the n e twork ass i gn e d to r e cogn i z e sa i d c li ent 
state codo transm i ss i on, 

wh e r ei n sa i d s e rv e r ma i nta i ns a bas eli n e for sa i d c lie nt, and 

whoro i n sa i d baso li no compr i soG sa i d hash codo tab l o of a sa i d c li ent; 

wh e r ei n th e st e p of prov i d i ng a hash cod e tab le of a n e twork d e v i c e furth e r 
compr i ses prov i d i ng a socuro hash codo tablo; 

wh e r ei n th e st e p of prov i d i ng a s e cur e hash cod e tab le furth e r compr i s e s 
generat i ng a socuro hash codo tab l o; and 

wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one baseline secure value. 
37. (Currently Amended) A method for securing, maintaining, monitoring and 
controlling computer networks and clients located therein, comprising: 
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providing a hash code table of a client on at least one storage component of a computer 
network device or client : providing a client state code of a client on at least one storage 
component of a computer network device or client : 

comparing said client state code to said hash code table, wherein said hash code 
table is operable for one or more client platforms; 

wherein providing a hash code table includes gathering baseline values to define 
modal values and generating said hash code table using said defined modal values, 

wherein each of said clients uses the same or different operating platform as 
another of said client, and wherein regardless of the operating platform used by a said 
client, said client state code is compared to said generated hash code table. 
38. (New) A method for securing, maintaining, monitoring and controlling computer 
networks and clients located therein, comprising: providing a network of computing 
components, including at least a plurality of clients, and at least one server; providing a 
hash code table of a client said hash code table being provided for storing a plurality of 
files; providing a client state code of a client; comparing said client state code to said 
hash code table, and generating an alert mechanism when a deviation threshold is 
reached based on a deviation between said hash code table values for said client and 
said client state code; 

wherein said hash code table includes the hash codes for files on computers 
within the network that are to be secured; 

the method further including: 

transmitting across a network from clients located in the network a client state 
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code; 

providing at least one server within the network assigned to recognize said client 
state code transmission, 

wherein said server maintains a baseline for said client, and 

wherein said baseline comprises said hash code table of a said client; 

wherein the step of providing a hash code table of a network device further 
comprises providing a secure hash code table; 

wherein the step of providing a secure hash code table further comprises 
generating a secure hash code table; and 

wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one compiled client hash value, 
wherein said compiled client hash value is generated by: providing a secure system 
state data file; grouping said secure system data file into one or more groups; and, 
extracting the modal hash value from any of said groups. 

39. (New) A computer storage component including software containing the hash 
code table generated by a method for securing, maintaining, monitoring and controlling 
computer networks and clients located therein, comprising: providing a network of 
computing components, including at least a plurality of clients, and at least one server; 
providing a hash code table of a client said hash code table being provided for storing a 
plurality of files; providing a client state code of a client; comparing said client state code 
to said hash code table, and generating an alert mechanism when a deviation threshold 
is reached based on a deviation between said hash code table values for said client and 
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said client state code; wherein said hash code table includes the hash codes for files on 
computers within the network that are to be secured; 
the method further including: 

transmitting across a network from clients located in the network a client state 

code; 

providing at least one server within the network assigned to recognize said client 
state code transmission, 

wherein said server maintains a baseline for said client, and 

wherein said baseline comprises said hash code table of a said client; wherein 
the step of providing a hash code table of a network device further comprises providing 
a secure hash code table; 

wherein the step of providing a secure hash code table further comprises 
generating a secure hash code table; and 

wherein the step of generating a secure hash code table further comprises 
generating a secure hash code table using at least one compiled client hash value, 
wherein said compiled client hash value is generated by: providing a secure system 
state data file; grouping said secure system data file into one or more groups; and, 
extracting the modal hash value from any of said groups. 

40. (New) A method for securing, maintaining, monitoring and controlling computer 
networks and clients located therein, comprising: providing a network of computing 
components, including at least a plurality of clients, and at least one server; 
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providing a hash code table of a client on at least one storage component of a computer 
network device or client; providing a client state code of a client on at least one storage 
component of a computer network device or client; 

comparing said client state code to said hash code table, wherein said hash code 
table is operable for one or more client platforms; 

wherein providing a hash code table includes gathering baseline values to define 
modal values and generating said hash code table using said defined modal values, 

wherein each of said clients uses the same or different operating platform as 
another of said client, and wherein regardless of the operating platform used by a said 
client, said client state code is compared to said generated hash code table. 
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Allowable Subject Matter 

2. The following is an examiner's statement of reasons for allowance: As indicated 
in the Office Action mailed 09/08/2008 the prior art fails to teach gathering/grouping 
values/files and extracting the modal value(s) to provide a hash code table in 
combination with the remaining claimed limitations. The additional amendments made 
to claim 37 were made to place the claim in compliance with 35 USC 101 . 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL PYZOCHA whose telephone number is 
(571)272-3875. The examiner can normally be reached on Monday-Thursday, 7:00am - 
4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Michael Pyzocha/ 
Examiner, Art Unit 2437 



